
$ rpki-client -vvf repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft
File: FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft (raw, json)
Hash identifier: 692WyUlx81X93PrlzsysqdLNNyNwqYmLtxS75gWcmRU=
Subject key identifier: 8B:FF:1A:75:89:06:C0:E6:1C:DC:9D:BA:19:03:A9:23:4F:39:9A:52
Authority key identifier: FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81
Certificate issuer: /CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81
Certificate serial: 7C21047F033AB943AE0C33F40CABB3E7A9AFE53F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft
Manifest number: 010B
Signing time: Mon 20 Apr 2026 02:21:58 +0000
Manifest this update: Mon 20 Apr 2026 02:16:58 +0000
Manifest next update: Thu 23 Apr 2026 08:31:58 +0000
Files and hashes: 1: 3136302e32352e3235302e302f32332d3233203d3e20313533303938.roa (hash: eL66HCHXLPzvvpIp6yZbwohxEw2vNNGKLUjoRHRX4l0=)
2: 3136302e32352e3235302e302f32342d3234203d3e20313533303938.roa (hash: MrtKeNjFNhl14mhfxKI/GhEb/0ohG0B8bmQ7SLXWttE=)
3: 3136302e32352e3235312e302f32342d3234203d3e20313533303938.roa (hash: +X50gpeSdWT/Y5d22C2/uBOgo8Xzo2+UIRSSAuVLkyI=)
4: FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl (hash: QLuNrelh++WkYGYGQYASpOxpNGPL3FKqlIeEXC9h66E=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl
rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 08:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:21:04:7f:03:3a:b9:43:ae:0c:33:f4:0c:ab:b3:e7:a9:af:e5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81
Validity
Not Before: Apr 20 02:16:58 2026 GMT
Not After : Apr 23 08:31:58 2026 GMT
Subject: CN=8BFF1A758906C0E61CDC9DBA1903A9234F399A52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:70:da:70:01:d4:6e:e8:26:f1:9c:8f:27:5f:
f2:c0:2f:28:f2:e3:7c:3a:4a:fa:72:35:f9:86:3b:
d6:40:60:b6:70:36:24:a4:41:b3:a4:7b:b8:82:41:
43:0c:f0:59:ec:b1:29:9d:f4:ef:a2:6d:89:e8:f3:
0e:7b:21:ee:36:0a:a3:46:30:6b:9f:ee:37:60:a4:
b1:8f:81:f3:6c:9c:66:ef:ec:63:a4:db:7b:b3:4b:
9e:75:a7:fa:1b:97:71:48:2c:a2:99:f6:1f:2a:5f:
39:18:b8:c9:2f:97:47:e0:25:aa:dd:00:26:e1:7c:
7c:88:aa:ce:d0:9c:bb:f4:b6:95:e0:f8:41:1f:f0:
5d:40:ab:04:34:39:52:cb:e8:b0:2d:15:6a:31:24:
de:e4:6c:06:31:f4:bb:75:f6:97:72:cc:19:68:5e:
f8:45:05:41:e8:64:3d:bf:da:59:38:75:e2:79:9d:
c0:c4:9f:d6:e1:8d:2c:a6:31:b6:80:75:52:24:3f:
56:03:6b:48:7c:7f:b7:00:e0:5a:e5:b2:23:0e:b9:
15:74:29:3c:0b:7f:78:eb:e0:e9:08:4d:6e:a0:d5:
12:32:8f:60:43:bb:3c:2b:cc:21:88:80:e0:d9:5d:
1a:ed:13:c3:b2:cf:b6:db:25:ef:12:bc:a8:8e:a9:
fa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FF:1A:75:89:06:C0:E6:1C:DC:9D:BA:19:03:A9:23:4F:39:9A:52
X509v3 Authority Key Identifier:
keyid:FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:70:91:15:d7:ef:81:c1:4a:52:a9:65:1f:6c:5e:62:9d:96:
e7:04:c0:ef:d7:e7:bc:31:df:05:dd:d3:53:12:49:13:8d:31:
26:71:95:61:fc:a0:5d:4c:62:b6:c8:66:58:14:e3:76:45:13:
0b:50:09:5c:fc:ac:42:45:d6:ef:52:37:f8:fb:6c:19:36:44:
99:c0:7b:22:70:63:0e:79:bd:75:b5:7b:ba:04:87:61:2b:55:
93:a5:9f:7f:58:cc:1c:ef:f7:ca:45:83:d5:e2:7e:9d:2b:9e:
2c:e1:1c:2a:63:83:55:5d:df:98:46:52:68:7e:f9:76:83:7a:
04:b3:29:e7:70:b7:3c:02:d6:aa:b9:1a:f8:27:aa:76:d0:b5:
3d:c5:f2:73:86:4b:15:d5:d2:3e:3f:66:66:42:f6:0a:58:02:
4f:e1:f9:ee:4f:6c:a6:8b:86:c0:49:54:90:af:a8:fd:4a:d9:
fb:55:44:bc:4e:1a:a1:4e:e4:f3:2f:c7:cf:91:6a:ef:e3:a6:
29:02:43:71:dd:48:f8:cc:96:02:23:76:60:9c:47:2c:04:76:
b2:75:55:26:37:1c:fb:5d:9d:ce:9c:ce:af:ec:23:a5:8d:ce:
69:36:9a:21:6a:68:78:94:f2:f1:bb:e9:41:38:bb:73:ff:07:
1c:4e:5d:40
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfCEEfwM6uUOuDDP0DKuz56mv5T8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1NzU3
NEMwN0U4MTAeFw0yNjA0MjAwMjE2NThaFw0yNjA0MjMwODMxNThaMDMxMTAvBgNV
BAMTKDhCRkYxQTc1ODkwNkMwRTYxQ0RDOURCQTE5MDNBOTIzNEYzOTlBNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDucNpwAdRu6CbxnI8nX/LALyjy
43w6SvpyNfmGO9ZAYLZwNiSkQbOke7iCQUMM8FnssSmd9O+ibYno8w57Ie42CqNG
MGuf7jdgpLGPgfNsnGbv7GOk23uzS551p/obl3FILKKZ9h8qXzkYuMkvl0fgJard
ACbhfHyIqs7QnLv0tpXg+EEf8F1AqwQ0OVLL6LAtFWoxJN7kbAYx9Lt19pdyzBlo
XvhFBUHoZD2/2lk4deJ5ncDEn9bhjSymMbaAdVIkP1YDa0h8f7cA4FrlsiMOuRV0
KTwLf3jr4OkITW6g1RIyj2BDuzwrzCGIgODZXRrtE8Oyz7bbJe8SvKiOqfrzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUi/8adYkGwOYc3J26GQOpI085mlIwHwYDVR0j
BBgwFoAU+8Oabhd/jde6XiV9RInFdXTAfoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
N2FkMGEzYS0yNmI4LTQ0OWEtODhlYy1iZjAzOThlYTUzYTYvMC9GQkMzOUE2RTE3
N0Y4REQ3QkE1RTI1N0Q0NDg5QzU3NTc0QzA3RTgxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1NzU3NEMw
N0U4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDdhZDBhM2EtMjZiOC00NDlhLTg4
ZWMtYmYwMzk4ZWE1M2E2LzAvRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1
NzU3NEMwN0U4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHZwkRXX74HBSlKpZR9sXmKdlucEwO/X57wx
3wXd01MSSRONMSZxlWH8oF1MYrbIZlgU43ZFEwtQCVz8rEJF1u9SN/j7bBk2RJnA
eyJwYw55vXW1e7oEh2ErVZOln39YzBzv98pFg9Xifp0rnizhHCpjg1Vd35hGUmh+
+XaDegSzKedwtzwC1qq5GvgnqnbQtT3F8nOGSxXV0j4/ZmZC9gpYAk/h+e5PbKaL
hsBJVJCvqP1K2ftVRLxOGqFO5PMvx8+Rau/jpikCQ3HdSPjMlgIjdmCcRywEdrJ1
VSY3HPtdnc6czq/sI6WNzmk2miFqaHiU8vG76UE4u3P/BxxOXUA=
-----END CERTIFICATE-----
Generated at Wed Apr 22 04:53:54 2026 by rpki-client